Privacy & Cookies Policy
Last updated: 08.10.2026
Our Commitment to Your Privacy
At Global Mega Care Ltd, we respect your privacy and are committed to protecting the personal information entrusted to us.
This Privacy Notice explains how we collect, use, store and protect personal information when you visit our website, contact us, enquire about our services, apply to work with us, work with us, or receive care and support from us.
We aim to handle personal information fairly, lawfully, securely and transparently, in accordance with applicable UK data protection law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations (PECR).
We regularly review this Privacy Notice to ensure that it remains accurate and reflects how we use personal information.
1. Who We Are
Global Mega Care Ltd is a private limited company providing care and support services to adults.
For data protection purposes, Global Mega Care Ltd will generally act as the data controller for the personal information we collect and use in connection with our services, website, recruitment and business activities.
Global Mega Care Ltd
400 Thames Valley Park Drive
Reading
RG6 1PT
Email: info@globalmegacare.com
Telephone: 0118 466 4971
Website: www.globalmegacare.com
2. Who This Privacy Notice Applies To
This Privacy Notice applies to personal information relating to people who interact with Global Mega Care Ltd, including:
people who enquire about or receive our care and support services;
prospective service users and people undergoing assessment;
family members, representatives, advocates or other people involved in someone’s care or support;
people who contact us through our website, by telephone, email or other communication methods;
people who provide feedback, raise concerns or make complaints;
job applicants, employees, workers and other members of our workforce;
people who provide professional, business or supplier services to us;
representatives of organisations we work with; and
visitors to our website.
The information we collect and how we use it will depend on our relationship with you and the circumstances in which your information is provided.
Where appropriate, we may provide additional privacy information for particular groups, such as employees or job applicants, or where a particular service involves additional processing.
3. Data Protection Registration
Global Mega Care Ltd is registered with the Information Commissioner’s Office (ICO).
ICO registration reference: ZB407799
4. What Personal Information We Collect
The personal information we collect depends on how you interact with us.
Contact and identification information
This may include:
name;
address;
telephone number;
email address;
date of birth or age;
identification information where required; and
other contact or identification details relevant to the service or relationship.
Enquiry and assessment information
When you contact us about our services, we may collect information such as:
the nature of your enquiry;
the services you are interested in;
information about your circumstances and support requirements;
information needed to arrange an assessment or discuss services;
communication preferences; and
information necessary to respond appropriately to your enquiry.
Care and support information
Where we provide care or support, we may process information including:
health and wellbeing information;
disability and support needs;
personal circumstances;
care and support needs;
risks and risk-management information;
medication information where relevant;
communication needs;
preferences, routines and choices;
safeguarding information;
information relating to mental capacity and decision-making; and
other information necessary to provide safe and appropriate care and support.
Some of this information may constitute special category personal data, including health information.
Recruitment and workforce information
For recruitment and employment purposes, we may collect:
contact and identification information;
employment history;
qualifications and experience;
references;
right-to-work information;
DBS and other relevant checks;
training and competency information;
information relating to suitability for particular roles; and
other information necessary for recruitment, employment and workforce management.
Website and technical information
When you use our website, certain technical information may be generated or collected by the website or its hosting environment, such as:
IP address;
browser type;
device information;
technical logs; and
information necessary to maintain website security and functionality.
Our current website does not use Google Analytics, Google Tag Manager or advertising/marketing tracking services.
5. Information You Provide Through Our Website
You may provide personal information through website facilities such as:
Get in Touch forms;
appointment or enquiry forms;
team or recruitment forms;
feedback and complaints forms;
requests for information; and
other contact facilities available on our website.
We use this information to respond to your enquiry, provide information, arrange contact or appointments, consider applications, address feedback or complaints, and, where appropriate, take steps towards providing services or entering into an arrangement with you.
Website enquiry forms
Our website forms use Elementor Forms.
Information submitted through our website forms is stored within the WordPress website administration system under the website’s submissions area and remains stored in the website database after being emailed to us.
Website form submissions are also sent to info@globalmegacare.com so that we can respond to the enquiry or request.
Access to submitted information is restricted to those who need it for legitimate business purposes.
6. Information We Receive From Other People
In some circumstances, we may receive personal information from people or organisations other than the individual the information relates to.
Depending on the circumstances, sources may include:
family members;
representatives and advocates;
health and social care professionals;
local authorities;
commissioners;
referrers;
safeguarding professionals or authorities;
relevant public bodies;
previous or current employers or referees;
professional advisers; and
other organisations involved in arranging, funding, regulating or supporting care and services.
The information received may include contact details, identification information, care and support information, health and wellbeing information, safeguarding information, professional information or other information relevant to the purpose for which it is provided.
Where we obtain personal information from another source, we will handle it in accordance with applicable data protection law and provide appropriate privacy information where required.
There may be circumstances where we cannot provide all information about a source immediately, for example where doing so could prejudice safeguarding, legal or regulatory processes.
7. How We Use Personal Information
We may use personal information to:
respond to enquiries and requests;
arrange appointments, assessments and discussions;
assess care and support needs;
provide care and support services;
develop and review care and support plans;
manage risks and promote safety and wellbeing;
identify and respond to safeguarding concerns;
communicate with individuals, families, representatives and professionals;
manage complaints, concerns, incidents and feedback;
monitor and improve the quality and safety of our services;
recruit, employ, train and manage our workforce;
carry out required checks and assessments;
meet legal and regulatory requirements;
maintain appropriate records;
manage accounts, payments and financial administration;
obtain professional advice where necessary;
manage insurance and business administration;
maintain website and information-system security;
prevent and detect fraud or misuse;
respond to data protection rights and requests; and
communicate with regulators, public authorities and other organisations where appropriate and lawful.
We only collect and use information that is relevant and necessary for the purpose for which it is being processed.
8. Lawful Bases for Processing
Under UK data protection law, we must have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on:
Consent – where you have given us permission to use your information for a specific purpose and consent is the appropriate lawful basis;
Contract – where processing is necessary to enter into or perform a contract or take steps at your request before entering into a contract;
Legal obligation – where we need to process information to comply with a legal or regulatory requirement;
Legitimate interests – where processing is necessary for our legitimate interests, or those of a third party, provided those interests are not overridden by your rights and interests;
Vital interests – where processing is necessary to protect someone’s life or prevent serious harm in circumstances where another lawful basis is not appropriate.
The lawful basis we rely on will depend on the particular processing activity and circumstances.
Where we rely on legitimate interests, these may include managing and improving our services, maintaining appropriate records, protecting people from harm, managing risk, maintaining business and information-system security, and operating our organisation effectively.
9. Special Category Personal Data
Care and support services may require us to process special category personal data, particularly information concerning health, disability and wellbeing.
Where we process special category information, we will identify both:
an appropriate lawful basis under Article 6 of the UK GDPR; and
an appropriate condition under Article 9 of the UK GDPR and, where required, the Data Protection Act 2018.
Depending on the circumstances, this may include processing necessary for the provision or management of health or social care, explicit consent, employment and social protection purposes, vital interests, substantial public interest or another applicable lawful condition.
We only process special category information where it is relevant and necessary for the purpose concerned.
10. Safeguarding
We take safeguarding seriously.
We may collect, use and share personal information where this is necessary to identify, prevent or respond to abuse, neglect, exploitation, harm or other safeguarding concerns.
Where appropriate, information may be shared with relevant professionals, safeguarding authorities, emergency services, regulators, local authorities or other organisations where this is lawful and necessary to protect an individual or others from harm.
In an emergency, information may be processed or shared where necessary to protect someone’s vital interests.
11. Sharing Personal Information
We do not sell personal information.
Where appropriate and lawful, we may share personal information with:
care and support staff;
family members, representatives or advocates;
health and social care professionals;
local authorities;
commissioners and referrers;
safeguarding authorities and relevant public bodies;
emergency services;
the Care Quality Commission (CQC) and other regulators;
professional advisers, such as accountants, solicitors or other advisers;
insurers;
recruitment and checking services;
IT, website, email and other technology service providers; and
other organisations where sharing is necessary, lawful and relevant to the circumstances.
Some organisations may process personal information on our behalf as data processors. Where applicable, we take appropriate steps to ensure that such processing is carried out lawfully, securely and in accordance with our instructions and applicable data protection requirements.
We only share information where there is a lawful basis and where the information shared is relevant and necessary for the purpose.
12. Confidentiality
We treat personal information as confidential and restrict access to people who need it for legitimate purposes.
Our staff and other relevant personnel are expected to maintain confidentiality and follow appropriate information-governance and data-protection requirements.
There are circumstances where confidentiality may need to be limited, including where disclosure is necessary to protect someone from serious harm, respond to safeguarding concerns, comply with the law, meet regulatory requirements or respond to a lawful request from an appropriate authority.
13. Information Security
We take appropriate technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
Measures may include:
access controls;
secure systems and storage;
confidentiality requirements;
staff training and awareness;
information-governance arrangements;
appropriate technical and organisational safeguards; and
procedures for identifying and responding to information-security incidents.
No method of storing or transmitting information can be guaranteed to be completely secure. However, we take reasonable and appropriate steps to protect the information we hold.
14. Retention of Personal Information
We retain personal information only for as long as it is reasonably necessary for the purpose for which it was collected or otherwise lawfully processed.
The length of time information is retained will depend on factors including:
the type and sensitivity of the information;
the purpose for which it is used;
whether we are providing care or support;
legal and regulatory requirements;
safeguarding considerations;
complaints, incidents or investigations;
accounting and financial requirements;
contractual requirements;
legitimate business and record-keeping needs; and
any other applicable legal or professional requirements.
When information is no longer required, we will securely delete, destroy or anonymise it as appropriate.
We maintain internal arrangements for records management and retention.
15. Your Data Protection Rights
Depending on the circumstances and subject to applicable legal exemptions, you may have rights including:
the right to be informed about how we use your personal information;
the right of access to your personal information;
the right to rectification of inaccurate or incomplete information;
the right to erasure of your personal information in certain circumstances;
the right to restriction of processing in certain circumstances;
the right to object to certain processing;
the right to data portability in certain circumstances;
the right to withdraw consent where consent is the lawful basis for processing; and
rights relating to certain forms of automated decision-making and profiling, where applicable.
These rights do not apply in every circumstance and may be subject to legal exemptions.
16. How to Exercise Your Rights
If you wish to exercise a data protection right or ask a question about how we use your personal information, please contact us:
Email: info@globalmegacare.com
Telephone: 0118 466 4971
We may need to verify your identity before responding to a request. This is to help protect personal information and prevent unauthorised disclosure.
We will respond to requests within the timescales required by applicable data protection law.
17. Providing Information to Us
In some circumstances, we may need certain personal information in order to provide a service, assess needs, meet legal or regulatory requirements, or enter into or perform an agreement.
Where particular information is necessary, we will explain this and, where appropriate, explain what may happen if the information is not provided.
You do not have to provide information where there is no lawful requirement or other valid reason for us to request it.
18. Information About Children
Our current care and support services are focused on adults.
We may nevertheless receive information relating to children in certain circumstances, for example where a family member, representative or professional provides information as part of an enquiry, safeguarding matter or other legitimate interaction with us.
Where we receive or process children’s information, we will handle it appropriately and in accordance with applicable data protection requirements.
We do not currently provide children’s care services through the services described in this Privacy Notice.
19. Cookies and Similar Technologies
Our website may use cookies or similar technologies where they are necessary for the operation, security or functionality of the website.
Our current website does not use:
Google Analytics;
Google Tag Manager;
advertising or marketing tracking services; or
analytics services intended to track visitors for marketing or profiling purposes.
We currently use CookieYes to provide the website’s cookie consent/banner functionality.
At present, we understand that there are no non-essential cookies or tracking technologies actively being used for analytics, advertising or marketing purposes on our website.
If this changes, we will review the website’s cookie arrangements and update our privacy information and consent arrangements where required.
20. External Websites
Our website may contain links to other websites.
We are not responsible for the privacy practices, security or content of external websites. If you follow a link to another website, you should review that website’s own privacy notice and cookie information.
21. Direct Marketing
We do not sell personal information to third parties.
If we carry out direct marketing in the future, we will do so in accordance with applicable data protection and electronic communications laws.
Where applicable, you will have the right to object to direct marketing and can ask us to stop sending marketing communications.
22. International Transfers
We may use service providers or technology systems that involve the storage or processing of personal information outside the UK.
Where personal information is transferred outside the UK, we will take appropriate steps to ensure that the transfer is lawful and that appropriate safeguards are in place where required under applicable data protection law.
The safeguards used will depend on the circumstances and may include an adequacy decision or appropriate contractual or other lawful safeguards.
We will review the location and transfer arrangements of relevant providers as part of our information-governance and supplier-management processes.
23. Automated Decision-Making and Profiling
We do not currently use solely automated decision-making or profiling that produces legal or similarly significant effects on individuals.
Where automated decision-making or profiling is introduced in the future, we will assess the processing against applicable data protection requirements and provide appropriate information and safeguards where required.
24. Changes to This Privacy Notice
We may update this Privacy Notice from time to time to reflect:
changes to our services;
changes in the personal information we collect or use;
changes to our website or technology;
changes to our service providers or information-sharing arrangements;
changes in legal or regulatory requirements; or
improvements to our information-governance arrangements.
The latest version will be published on our website.
We aim to review this Privacy Notice at least every 12 months, or sooner where there is a significant change to the way we process personal information.
25. Contact Us
If you have any questions about this Privacy Notice or how Global Mega Care Ltd handles personal information, please contact us:
Global Mega Care Ltd
400 Thames Valley Park Drive
Reading
RG6 1PT
Email: info@globalmegacare.com
Telephone: 0118 466 4971
26. Complaints About Data Protection
If you have concerns about how we have handled your personal information, we encourage you to contact us first so that we can understand your concerns and try to resolve them.
You also have the right to complain to the Information Commissioner’s Office (ICO) if you believe that your personal information has not been handled in accordance with data protection law.
The ICO’s contact details are available on its website:
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Our Commitment
We are committed to treating personal information with care, respect and confidentiality.
We will continue to review our information-governance arrangements and seek to ensure that personal information is handled lawfully, securely, transparently and only for appropriate purposes.
